Chen, Edwards, Urquhart and McAuley, ‘Who is responsible for data processing in smart homes? Reconsidering joint controllership and the household exemption’

KEY POINTS
The growing industrial and research interest in protecting privacy and fighting cyberattacks for smart homes has sparked various innovations in security- and privacy-enhancing technologies (S/PETs) powered by edge computing. The complex technical set-up has however raised a whole series of legal issues surrounding the regulation of smart home with data protection law. To determine how responsibility and accountability should be fairly assumed by stakeholders, there is a pressing need to first clarify the roles of these parties within the existing data protection legal framework. This article focuses on two legal concepts under the General Data Protection Regulation (GDPR) as the mechanisms to (dis)assign responsibilities to various categories of entities in a domestic Internet of Things (IoT) context: joint controllership and the household exemption …

Jiahong Chen, Lilian Edwards, Lachlan Urquhart and Derek McAuley, Who is responsible for data processing in smart homes? Reconsidering joint controllership and the household exemption, International Data Privacy Law, Volume 10, Issue 4, November 2020, Pages 279–293, https://doi.org/10.1093/idpl/ipaa011.

First posted 2021-02-02 10:20:29

Leave a Reply